-
Title
Ports required for Management Console for Unix (MCU) -
Description
What network ports are required for Management Console for Unix (MCU) ?
-
Resolution
The following is a list of ports which are required to be opened for the Management Console for Unix to the Active Directory Domain Controllers. To verify a port is opened you can use a port scanner utility or use the telnet command.
53 TCP and UDP
Used for DNS. Since Quest Identity Manager for Unix uses DNS to locate domain controllers, DNS servers used by the Unix hosts must serve Active Directory DNS SRV records.88 TCP and UDP:
Used for Kerberos authentication and Kerberos service ticket requests against Active Directory Domain Controllers. UDP is used by default, but TCP is also used if the Kerberos ticket is too large for UDP transport.389 TCP and UDP
Used for LDAP searches against Active Directory Domain Controllers. TCP is normally used, but UDP is used when detecting the Active Directory site membership.3268 TCP
Used for LDAP searches against Active Directory Global Catalogs. TCP is always used when searching against the Global Catalog.
MCU uses the following port to connect to the target Unix/Linux systems22 TCP
Default TCP port number used for Secure Shell
(SSH) access to Unix hosts being managed by IMU.
MCU listens on the following ports9001 TCP
Default TCP port used internally on the loopback interface of the IMU server for JDBC connections.9443 TCP
Default IMU Web server TCP port used for HTTPS. Configurable at install time.For information on ports between QAS client and Active Directory please see Knowledge Base Article 13608 -
Additional Information
Identity Manager for Unix Console (IMU) 1.0 has a new name of Quest One Management Console for Unix (MCU) 2.0.
If you are currently running Identity Manager for Unix 1.0 version also known as IMU 1.0 we highly recommend you upgrade to Quest One Management Console for Unix as we have identified several key areas of improvement with the product. At the time this was written the latest version is Management Console for Unix 2.5 which have been combined into a new offering called Privileged Access Suite for Unix available for download on the Support Portal | www.quest.com/support